Thanks for pointing this out Dave. I'll write a document today on how to report issues for DataFu and include a section specifically about how to report security issues.
-Matt > On Aug 2, 2017, at 9:52 AM, David Fisher <w...@apache.org> wrote: > > Hi DataFu: > > It looks like you are about ready to graduate. Congratulations. > > I do have one issue to mention. Something that you need to change quickly. > Reporting of a security issue must not be to JIRA. JIRA is not secure. > Security issues must be reported privately. Either you can refer to the > Foundation wide secur...@apache.org or you can use your private@datafu list. > > Regards, > Dave
